HAII Corp. Privacy Policy

HAII Corp. (hereafter referred to as “the Company”) establishes and publicly discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act of the Republic of Korea to protect the personal information of data subjects and to handle any related grievances promptly and smoothly.

This policy reflects relevant laws and the most recent administrative guidelines and is drafted accordingly. Even without explicit revision, the Company processes personal information based on the most up-to-date laws and regulations. Should legal amendments, new guidelines, or necessary changes to specific clauses of this policy arise, major updates will be made immediately, while minor updates will be accumulated and amended collectively on a regular basis, following internal Standard Operating Procedures (SOPs).

Unless otherwise stated, all time periods are calculated based on calendar days.

Article 1 (Purpose of Personal Information Processing)

The Company processes personal information for the following purposes. Processed personal information will not be used for any purposes other than the following, and should the purpose of use change, the Company will obtain separate consent or take appropriate measures.

  1. Participant Management for Service Planning and Clinical Trials

The Company processes personal information to confirm voluntary participation, identify and authenticate participants for service provision, maintain and manage participant eligibility, enforce identity verification measures, prevent misuse of services, verify legal guardian consent for minors under 14, deliver notices and notifications, and handle grievances.

  1. Provision of Services and Related Goods

The Company processes personal information for service delivery, shipment of goods, sending contracts and invoices, providing content, delivering personalized services, identity and age verification, billing, or debt collection if applicable.

  1. Safe Utilization and Processing of Healthcare Data

To safely and appropriately utilize health-related data, the Company processes such data in pseudonymized form, or processes already pseudonymized data for statistical compilation, scientific research, or public record preservation under Article 28-2 of the Personal Information Protection Act.

  1. Handling Inquiries and Grievances

Personal information is processed for identity verification, verification of complaint details, communication and notification regarding the fact-finding process, and providing responses or results.

Article 2 (Items of Personal Information Processed)

  1. The Company collects and processes the following personal information to provide goods or services:

Required items:

• Name, date of birth, gender

• Contact information (email, mobile phone number), SNS ID

• Encrypted user identifiers (CI), duplicate participation confirmation information (DI)